Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3230302e39342e3234302e302f32322d3232203d3e20323731373234.roa
File:                     3230302e39342e3234302e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier:          keY3WlPIlLLHS7DBQ5h+kkxLCMIZ1/G1cYAQAkTP0H8=
Subject key identifier:   6C:CD:F9:89:6E:7D:AC:FE:6D:F9:DA:AD:03:2A:01:A2:54:06:79:95
Certificate issuer:       /CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
Certificate serial:       677380CD16ADE930E63012386228805531080E86
Authority key identifier: 26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3230302e39342e3234302e302f32322d3232203d3e20323731373234.roa
Signing time:             Mon 10 Oct 2022 19:51:26 +0000
ROA not before:           Mon 10 Oct 2022 19:46:26 +0000
ROA not after:            Mon 09 Oct 2023 19:51:26 +0000
asID:                     271724
IP address blocks:        200.94.240.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:73:80:cd:16:ad:e9:30:e6:30:12:38:62:28:80:55:31:08:0e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Validity
            Not Before: Oct 10 19:46:26 2022 GMT
            Not After : Oct  9 19:51:26 2023 GMT
        Subject: CN=6CCDF9896E7DACFE6DF9DAAD032A01A254067995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b5:c1:b8:b1:70:72:52:e1:de:73:11:72:7b:
                    f9:ad:ef:3f:dd:04:2a:54:f2:da:1d:5a:b7:04:af:
                    ce:93:08:3d:48:f0:04:b0:07:4e:99:ca:c9:47:88:
                    fb:0e:b5:e8:51:24:c0:69:ef:b5:30:df:2b:14:93:
                    be:48:e4:dc:35:dc:ff:99:87:fb:0c:d3:92:90:0f:
                    98:45:53:26:0a:51:14:ef:30:84:bb:ce:8e:f3:64:
                    90:79:90:62:e3:7d:04:f2:32:7f:ba:7d:31:30:08:
                    45:b2:20:c3:a4:15:a6:0f:b4:34:75:27:d8:3d:99:
                    93:42:c3:6a:4f:15:1d:93:6b:f1:6f:4f:60:41:14:
                    0b:e2:1b:cf:ec:0b:05:a2:4c:95:d4:f7:d0:4e:68:
                    f8:33:40:d6:b6:dc:67:c1:c3:c9:69:25:43:37:6f:
                    26:2e:10:45:8a:5c:8c:0a:56:93:26:41:b2:24:ce:
                    62:c9:7e:58:0c:18:a1:e8:03:45:f1:bd:06:b3:50:
                    2c:72:5b:6f:6a:f8:df:c5:ab:09:25:92:58:f4:75:
                    12:94:1c:b5:76:fa:5d:fe:8c:dc:b7:b4:8b:79:44:
                    ce:0c:ad:cd:cb:64:05:cd:64:4e:43:40:d3:d3:23:
                    bd:ca:c5:e6:4c:7a:06:22:6c:08:05:db:04:6d:66:
                    b6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CD:F9:89:6E:7D:AC:FE:6D:F9:DA:AD:03:2A:01:A2:54:06:79:95
            X509v3 Authority Key Identifier:
                keyid:26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3230302e39342e3234302e302f32322d3232203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:54:62:4d:5e:a6:61:a9:80:eb:12:68:af:2b:e6:8e:63:32:
         50:49:05:b3:3f:37:98:59:d2:50:a9:3c:b2:15:9d:8d:4d:05:
         86:66:12:b2:51:1f:40:7d:da:0e:49:72:70:8d:0c:d1:ab:66:
         f9:d3:da:a7:d1:3e:cc:56:92:fc:40:ad:61:9b:2c:f9:39:ae:
         cf:71:22:80:29:c3:3e:84:d7:c3:e5:83:42:fc:cc:43:96:8e:
         0e:03:d1:27:29:4d:ec:11:1e:4c:7b:19:2c:b6:bb:5c:5d:94:
         f5:7d:a0:3c:8c:a9:a8:7d:4a:67:4c:6f:6f:f8:34:29:05:49:
         80:59:27:b4:43:7f:81:c3:c3:f2:e2:af:04:5a:b2:2a:7a:85:
         7e:f9:bf:fe:af:c6:31:38:7d:2c:f0:5b:b7:81:f3:87:4f:5c:
         65:2e:fb:48:9b:8d:d2:4e:eb:e2:e0:d5:b4:3c:cc:5d:76:49:
         0a:c0:2a:3a:ec:6c:84:b1:7f:06:bd:9d:84:e1:24:03:8a:87:
         42:38:0a:3c:1f:eb:47:38:21:3e:17:2d:31:af:89:9a:54:83:
         bc:4c:1b:9f:cc:24:32:28:d3:4c:0d:c1:4d:4c:f5:b1:c0:c8:
         02:5f:c7:e1:9f:9e:55:59:7d:cd:b8:6e:66:bb:fa:d6:38:92:
         62:38:ba:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org